This reports the current operating state, such as running, stopped, or error, of the WAM plugin protecting a given web server. This is the first field to check when users report they can reach a protected web application without being challenged to log in at all, since a stopped or errored plugin here means the web server is serving pages with authorization bypassed rather than the policy simply allowing anonymous access. For example, this state reading Stopped would explain why an intranet page normally gated by WAM is suddenly reachable without a login prompt.